Open Source Vulnerabilities

linux-hwe-5.19

linux, linux-aws, linux-azure, linux-gcp, linux-hwe-5.19, linux-kvm, linux-lowlatency, linux-oracle, linux-raspi vulnerabilities

rudder-server vulnerable to SQL Injection

go1.20, go1.20, go1.20, go1.20, go1.20

Security update for go1.20

go1.19, go1.19, go1.19, go1.19, go1.19

Security update for go1.19

in2code/ipandlanguageredirect

ipandlanguageredirect extension vulnerable to SQL Injection

tpwd/ke_search, tpwd/ke_search, tpwd/ke_search

ke_search (aka Faceted Search) vulnerable to Cross-Site Scripting

pcapplusplus

UNKNOWN READ in pcpp::SSHIdentificationMessage::tryParse

libpod

libpod vulnerabilities

sssd

sssd regression

k8s.io/kubernetes, k8s.io/kubernetes, k8s.io/kubernetes, k8s.io/kubernetes

Kubelet vulnerable to bypass of seccomp profile enforcement

github.com/mattermost/mattermost-server/v6, github.com/mattermost/mattermost-server/v6, github.com/mattermost/mattermost-server/v6, github.com/mattermost/mattermost-server/v6

Mattermost Server Missing Authorization vulnerability

Specially crafted search query can cause large log entries in postgres

Denial of Service while unescaping a Markdown string

Path traversal in GitHub plugin's code preview feature

Stack exhaustion in PreparePostForClientWithEmbedsAndImages

Ephemeral messages return private channel contents in permalink previews

Playbooks lets you edit arbitrary posts

Deactivated user can retain access using oauth2 api

Collapsed Reply Threads APIs leak message contents from private channels

Channel commands execution doesn't properly verify permissions

Apps Framework allows install requests from regular members via an internal path

App Framework does not checks for the secret provided in the incoming webhook request

kubernetes, kubernetes, kubernetes

kubernetes, kubernetes, kubernetes

chromium, chromium

Security update for chromium